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Abstract 

This article examines the complexity of hybrid logics over transitive frames, transitive trees, and 
linear frames. 

We show that satisfiability over transitive frames for the hybrid language extended with the 
downarrow operator J, is NEXPTIME-complete. This is in contrast to undecidability of satisfiability 
over arbitrary frames for this language [2]. It is also shown that adding the @ operator or the past 
modality leads to undecidability over transitive frames. 

This is again in contrast to the case of transitive trees and linear frames, where we show these 
languages to be nonelementarily decidable. 

Moreover, we establish 2EXPTIME and EXPTIME upper bounds for satisfiability over transitive 
frames and transitive trees, respectively, for the hybrid Until/Since language. An EXPTIME lower 
bound is shown to hold for the modal Until language over both frame classes. 

1 Introduction 

Hybrid languages are extensions of modal logic that allow for naming and accessing states of a model 
explicitly. This renders hybrid logic an adequate representation formalism for many applications, where 
the basic modal and/or temporal languages do not suffice. Moreover, reasoning systems are easier to 
devise for hybrid than for modal logic. 

Hybrid Logic, as well as the foundations of temporal logic, goes back to Arthur Prior [25]. Since then, 
many — more or less powerful — languages have been studied. Here we briefly introduce the extensions 
that shall concern us in this article. 

Nominals are special atomic formulae that name states of models. They allow, for instance, for an 
axiom expressing irreflexivity, which cannot be captured by modal formulae: i — > ->Oi. 

The at operator @ can be used to directly jump to states named by nominals, independently of the 
accessibility relation. Hence, the above formula could also be written as @j-iOi. 

With the help of the downarrow operator J, , it is possible to bind variables to states. Whenever j x 
is encountered during the evaluation of a formula, the variable x is bound to the current state s. All 
occurrences of x in the scope of this J, are treated like nominals naming s. As an example, the formula 
J, .T.-iOOir reads as: Name the current state x and make sure that it is not possible to go from x to x in 
exactly two steps. This is an axiom for asymmetry, another property not expressible in modal logic. 

Combined with the @ operator, j leads to a very powerful language that can formulate many desirable 
properties and goes far beyond the scope of the simple nominal language. To give a more impressive 
example, we consider the Until operator. The formula U((p, i/>) reads as "there is a point in the future at 
which (p holds, and at all points between now and this point, tp holds". What the basic modal language 
is not able to express, can be achieved by the hybrid J.-@ language. 

=ix.Oiy.ipA@ x a(Oy^ V)- 

Besides more advanced temporal concepts such as "until" or "since" , hybrid temporal languages can 
express other desirable temporal notions such as "now" , "yesterday" , "today" , or "tomorrow" . More- 
over, with hybrid logic one can capture many temporally relevant frame properties (besides the above 

"This work was presented at Methods for Modalities 4 (2005). 

tlnstitut fur Informatik, Friedrich-Schiller-Universitat Jena, Germany, mundhenkOcs.uni-jena.de 
^School of Computer Science, University of Manchester, UK, schneider9cs.uni-jena.de 
§Fachbereich Informatik, Universitat Dortmund, Germany, thomas.schwentickSudo.edu 
^Fachbereich Informatik, Universitat Dortmund, Germany, volker.weberaudo.edu 



1 INTRODUCTION 



2 



mentioned, antisymmetry, trichotomy, directedness, . . . ). For this reason, hybrid temporal languages are 
of great interest where basic temporal logic reaches its limits [9l [5j El [13] . 

Transitive Frames. Hybrid logic is interpreted over Kripke frames and models, as is modal logic. A 
frame consists of a set of states (points in time) and an accessibility relation R, where xRy says that y is 
reachable from x or, seen temporally, y is in the future of x. We examine the computational complexity 
of satisfiability for several hybrid logics over transitive frames, transitive trees and linear frames. 

Modal, hybrid, and first-order logics over transitive models have been studied recently in [3l [Ml [32l [T9l 
[20l [THl [11] . Although the complexity of hybrid (tense) logic has been extensively examined [7[ [T5l 12] l3[ IT3] . 
there are highly expressive hybrid languages for whose satisfiability problems only results over arbitrary, 
but not over restricted, temporally relevant frame classes have been known. 

We concentrate on transitive frames because transitivity is a property that the relations of many 
different temporal applications have in common, even if they differ in other properties such as tree- 
likeness, trichotomy, irreflexivity, or asymmetry. Transitivity can be seen as the minimal requirement in 
many applications, for example temporal verification. 

But there are other reasons why this frame class is of interest, particularly in connection with com- 
putational complexity. In the special case of linear frames, nominals and @ can be simulated using the 
conventional modal operator and its converse. Hence, the basic hybrid language is as expressive over 
linear frames as the basic modal language. The J, operator is useless even on transitive trees, a represen- 
tation of branching time. Over transitive frames, in contrast, these hybrid operators do make a difference. 
In this case, there are properties that can be expressed in the hybrid, but not in the modal language 
(see the irreflexivity example above). For this reason, the class of transitive frames can be regarded as 
a restricted frame class that is still general enough to separate hybrid from modal languages in terms of 
expressive power. 

Yet another reason for considering precisely transitive frames will become clear in the next paragraph. 

Complexity of Hybrid Logics. We use complexity classes NP, PSPACE, EXP TIME, NEXPTIME, 
nEXPTIME, n > 2, and coRE as known from [25 . A problem is nonelementarily decidable if it is 
decidable but not contained in any nEXPTIME. 

It goes without saying that reasoning tasks for richer logics require more resources than those for 
simpler languages, such as the basic modal language. We focus on one reasoning task, namely satisfiability. 
The modal and temporal satisfiability problems over arbitrary as well as over transitive frames are 
PSPACE-complete [21 [3D]. If the "somewhere" modality E is added, satisfiability becomes EXPTIME- 
complete over arbitrary frames [29 . For many, more restricted, frame classes, modal and temporal 
satisfiability is NP-complete [23] [24] [28] . In contrast, the known part of the complexity spectrum of 
hybrid satisfiability reaches up to undecidability. 

Many complexity results for hybrid languages have been established in [21 [3J . It was proven in 2 J 
that the hybrid language with nominals and @ has a PSPACE-complete satisfiability problem and that 
satisfiability for the hybrid tense language is EXPTIME-complete, even if @ or E are added. The same 
authors show that these problems have the same complexity (or drop to PSPACE-complete or NP- 
complete, respectively) if the class of frames is restricted to transitive frames (or transitive trees, or 
linear frames, respectively) [3j. 

Moreover, they established EXPTIME-completeness of satisfiability for the hybrid Until/Since lan- 
guage. The complexity of this language over transitive frames and transitive trees, respectively, has been 
open. PSPACE-completeness over linear frames is known from [13]. We want to find out at which exact 
requirements to the frame classes the decrease from EXPTIME to PSPACE takes place. 

Undecidability results for languages containing j originate from [3H5]. The strongest such result, 
namely for the pure nominal- free fragment of the J, language, is given in [2] . 

In recent work [33] , it was demonstrated that decidability of the J, language can be regained by certain 
restrictions on the frame classes. Transitivity might be another property under which the J, language can 
be "tamed" , since it has already been observed that over transitive trees and linear orders, the J. operator 
on its own is useless. 

New Road-Map Pages. This article establishes two groups of complexity results for hybrid languages 
over transitive frames, transitive trees, and linear frames. 

First, we examine satisfiability of the hybrid j language. Our most surprising result is the "taming" of 
this language over transitive frames: the satisfiability problem is NEXPTIME-complete. This high level 
of complexity is retained even over complete frames. We also show that enriching the language by the 
backward-looking modality P or the @ operator leads to undecidability in the case of transitive frames. 
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The situation is different over transitive trees. Decidability, even for the richest j language, is easy 
to see, but we will show it to be nonelementary if P or @ are added. For linear frames, this is already 
known in the temporal case. We prove that adding @ suffices to obtain nonelementary complexity. 

As a second step, we consider satisfiability over transitive frames and transitive trees for the hybrid 
Until/Since-E language. We establish EXPTIME-hardness for the modal language extended with Until 
only. This is matched by an EXPTIME upper bound for the full language in the case of transitive trees. 
As for transitive frames, we give a 2EXPTIME upper bound. 

Table [T] gives an overview of the satisfiability problems considered in this article (marked bold) and 
visualizes how our results arrange into a collection of previously known results. It makes use of the 
notation of hybrid languages introduced in Section [2] Complexity classes without addition stand for 
completeness results; "nonel." stands for nonelementarily decidable. The work from which the results 
originate, is cited. Conclusions from surrounding results are abbreviated by "c." . 



hybrid 
lang. 


complexity 
over arbi- 
trary frames 


complexity over 
transitive frames 


complexity over 
transitive trees 


complexity 
over linear 
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HC @ 
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EXPTIME [2] 
EXPTIME [3] 
EXPTIME [3] 


PSPACE [3] 
EXPTIME [3] 
EXPTIME [3] 
in 2EXPTIME (fl6|) . 
EXPTIME-hard dHJ) 


PSPACE [3] 
PSPACE [3] 
PSPACE [3] 
EXPTIME <|14I17|) 


NP [3] 
NP [3] 
NP [3] 

PSPACE- 
hard [27] 


nc l 

HC l F f 


coRE [2] 
coRE [2] 
coRE [2] 
coRE [2] 


NEXPTIME d) 
coRE ([11]) 
coRE ([IT]) 
coRE (c.) 


PSPACE [3] 
nonel. ([12]) 
nonel. ([12]) 
nonel. ([HI) 


NP [13] 
nonel. ([13)) 
nonel. [13] 
nonel. [13] 



Table 1. An overview of complexity results for hybrid logics. Numbers in round parentheses refer to the corresponding 
theorem. 

Legend. This article is organized as follows. In Section[2l we give all necessary definitions and notations 
of modal and hybrid logic. We present the decidability and undecidability results for the hybrid J, 
languages in Sections [3] and UJ The hybrid Until/Since language is examined in Section [5] Section [6] 
contains some concluding remarks. 



2 Modal and Hybrid Logic 

We define the basic concepts and notations of modal and hybrid logic that are relevant for our work. The 
fundamentals of modal logic can be found in [5] ; those of hybrid logic in [5] [S] . 

Modal Logic. Let PROP be a countable set of propositional atoms. The language ML of modal logic 
is the set of all formulae of the form 

ip. ::= p | -n(p | tp A if' | Otp , 

where p € PROP. We use the well-known abbreviations V, — <->, T ("true"), and _L ("false"), as well 
as Dip := — iO— iy. 

The semantics are defined via Kripke models. Such a model is a triple M = (M, R,V), where 
M is a nonempty set of states, R C M x M is a binary relation — the accessibility relation — , and 
V : PROP — * 5P(M) is a function — the valuation function. The structure T = (M, R) is called a frame. 
Given a model M — (M, R, V) and a state m G M, the satisfaction relation is defined by 

M, m \= p iff m e V(p), p e PROP, 

M, m \= -up iff M, m \£ tp, 

M,m\=(pAtp iff M,m \= tp & M,m \= ip, 

M,m\=Oip iff 3n G M(mRn & M,n |= ip). 
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A formula p is satisfiable if there exist a model A4 = [M, R, V) and a state m G M, such that 
.M, m \= p. If all states from M. satisfy tp, we write M.\= tp and say that tp is globally satisfied by AL 

Temporal Logic. The language of temporal logic (tense logic) is the set of all formulae of the form 

tp ::=p | -.p | tp htp' | Ftp | Pip, 

where p G PROP. It is common practice to use the abbreviations Gtp :— -iF-itp and Hp :— ^P->p. 
Satisfaction for F and P formulae is defined by 

M,m\=Ftp iff 3n e M(mRn k M, n |= ip), 
M,m^Pip iff 3n £ M(nRm k M, n |= ip). 

Whenever one wants to speak not only of states accessible from the current state, but also of states 
"between" the current and some accessible state, one can make use of the binary operators U ("until") 
and S ("since"), for which satisfaction is defined by 

M,m\=U(tp,ip) iff 3n(mRn k M,n^p k \/s(mRsRn =>• M, s\=tp)), 
M,m\=S(tp,ip) iff 3n(nRm k M,n^p kVs(nRsRm =>• M.s^ip)). 

The U/S language is strictly stronger than the basic temporal language in the sense that F and P can be 
expressed by U and S (e. g. Ftp — \i(tp, T)J, but not vice versa. 

In [3], a variant of the U/S operators, U + and S + , is introduced. Satisfaction for U + (analogously for 
S + ) is defined by 

M»h u+(( y5 ,v) 

iff 3n G M(mRn k M,n\= tp kVs G M(mR + sR + n => M, s \= ip)) , 

where R + is the transitive closure of R. By means of these operators, they "simulated" transitive frames 
syntactically [3]- 

We go a step further and define another modification, U ++ and S ++ , with the satisfaction relation 
M,m \= U ++ (p, V) 

iff 3neM(mR+n k M,n\=p & Vs G M(mR+sR + n =>• M,s \= ip)), 

and analogously for S ++ . The resulting temporal language is an even closer simulation of transitivity, as 
we will see in Section [5l 

Hybrid Logic. As indicated in the previous section, the hybrid language does not exist. Rather there 
are several extensions of the modal language allowing for explicit references to states and therefore being 
called hybrid. We introduce those hybrid languages that will interest us in this article. The definitions 
and notations are taken from (2j [3] . 

Let NOM be a countable set of nominals, SVAR be a countable set of state variables, and ATOM = 
PROP U NOM U SVAR. It is common practice to write propositional atoms as p,q, . . . , nominals as 
and state variables as x, y, . . . The full hybrid language TLC^' @ is the set of all formulae of the 

form 

p ::= a \ -up \ tp A tp' \ <>tp \ @ t tp \ [x.tp , 

where a G ATOM, t G NOM U SVAR, and x G SVAR. 

A hybrid formula is called pure if it contains no propositional atoms; nominal-free if it contains no 
nominals; and a sentence if it contains no free state variables. (Free and bound arc defined as usual; the 
only binding operator here is J, .) 

A hybrid model is a Kripke model with the valuation function V extended to PROP U NOM, where 
for all i G NOM, |V(z)| = 1. Whenever it is clear from the context, we will omit the word "hybrid" when 
referring to models. In order to evaluate J.-formulae, an assignment g : SVAR — ► M for A4 is necessary. 
Given an assignment g, a state variable x and a state m, an x-variant g^ of g is defined by 




m if x' = x, 
g(x') otherwise. 



2 MODAL AND HYBRID LOGIC 



5 



For any atom a, let 

\{g(a)} if a G SVAR, 
IV (a) otherwise. 

The satisfaction relation for hybrid formulae is defined by 



[V,g](a) 



M,g,m^a iff to G [V,g](a), a G ATOM, 

M,g,m\=->ip iS M,g,m^cp, 

M,g, m \= ip A ip iff M.,g, m \= ip & A4,g, m \= ip, 

A4,g, m\=Oip iff 3n e M(mRn & M,g,n \= ip), 

M,g,m^@ t <p iff 3neM(M,g,n\=ip8z[V,g](t) = {n}), 

M,g,m\=ix.(p iff M,g* n ,m \= <p. 

A formula is satisfiable if there exist a model = (M, R, V), an assignment g for A4, and a state 
to G M, such that M,g,m \= p>. 

We sometimes use the "somewhere" modality E having the interpretation 



M,g,m\= Eip iff 3n G M(M,g,n \= tp). 



In this case, @ is needless, because @ t ip can be expressed by E(i A <p). 

First-Order Logic. Modal and hybrid logic can be embedded into fragments of first-order logic. We 
will always use the standard notation of first-order logic. 

We will make use of certain fragments of first-order logic and denote them in the style of [TO] : 
[all, (it, 1)], where it G to. This notation stands for the fragment without equality, without function 
symbols, and with no other relation symbols than one binary and u unary oneqj- We denote the satisfia- 
bility problem for such a fragment by [all, (it, 1)]-SAT and [all, (u, l)]-trans-SAT, where the latter requires 
that the binary relation symbol is interpreted by a transitive relation. 

The Standard Translation ST [34] embeds hybrid logic into first-order logic and consists of two func- 
tions ST X and ST y , defined recursively. Since ST y is obtained from ST^ by exchanging x and y, we only 
give STz here. 



ST x (p) - P(x), 

ST x (t) = t = x, 

ST x (^p) = -nST x ((p), 

ST^Ai/0 = STsfa) AST*(V0, 

where p G PROP, t G NOM U SVAR, and v G SVAR. 



ST x (0^) - 3y(xRyAST y (<p)), 

ST x (@ t p) = 3y{y = tAST y (tp)), 

ST x (lv.p) = 3v(x = v AST x (</5)), 

ST X (E^) = 3y{sT v (<p)), 



Properties of Models and Frames. Let M. = (M, R, V) be a (Kripke or hybrid) model with the 
underlying frame T — (M, R). By R + we denote the transitive closure of R. For any subset M' C M, we 
write R\m' and V\m' fo r the restrictions of R and V to M'. We will refer to transitive frames or linear 
frames whenever we mean frames whose accessibility relation is transitive or a linear order, respectively. 
A linear order is an irreflexive, transitive, and trichotomous relation, where trichotomy is defined by 

(yxy(xRy or i = or yRx)). 

A frame T is a tree, if and only if it is acyclic and connected, and every point has at most one R- 
predecessor. A transitive tree is any (M, R+), where (M, R) is a tree. 

Satisfiability Problems. Whenever we leave one or more operators out of the hybrid language, we omit 
the according superscript of TtC. If we proceed to a hybrid tense language, we add the suitable temporal 
operator(s) as subscript(s) to TIC. Analogously, when equipping the modal language with additional 
operators, we add them as sub- or superscripts to M.C. 

For any hybrid language TtCy , the satisfiability problem TiCy-SAT is defined as follows: Given a 
formula tp G TtCy , does there exist a hybrid model A4, an assignment g for A4, and a state to G M 



1 Although constants are not mentioned in this notation, they are always assumed present, since they correspond to 
nominals in hybrid logic. 
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such that M.,g,m \= <p1 If J, is not in the considered language, the assignment g can be left out of 
this formulation. If we only ask for transitive models (or transitive trees or linear models, respectively) 
satisfying ip, we speak of W£*-trans-SAT (or W£*-tt-SAT, or H-C^-lin-SAT, respectively). E.g., the 

satisfiability problem over transitive frames for the hybrid temporal J, language is denoted by TCCp p - 
trans-SAT. 

3 Deciding TiC} over Transitive Frames 

Areces, Blackburn, and Marx [2] proved that the downarrow operator J. turns the satisfiability problem 
for hybrid logics undecidable in general, even if no interaction with @ or P is allowed. 
We prove that undecidability vanishes if frames are required to be transitive. 

Theorem 1 The satisfiability problem for Jill} over transitive frames is complete for NEXPTIME. 

Before we start with the proof, we have a first look at JiC} over transitive frames. Obviously, it has 
no finite model property. E.g., the following sentence requires a model containing an infinite chain of 
states labeled p. 

p A Op A DOp A □ ix.^Ox 

Neither is it always possible to find a model that is a transitive tree. But, in some way, we can get 
close to this. 

Although our models may contain cycles, transitivity ensures that all states in a cycle are pairwise 
connected. I.e., the subframe consisting of these states is complete. Therefore, we can view a model as 
consisting of maximal complete subframes and single states, that are connected in a transitive but acyclic 
fashion. 

For every transitive model M. = (M,R,V), we define its block tree B{M) = (M',R',V) as the 
structure obtained as follows. First, we replace each maximal complete subframe of M, for short clique, 
with a single vertex. Second, we unravel the resulting structure into a (potentially infinite) transitive 
tree T. Then we replace each vertex of T by (a copy of) the clique of M. from which it is derived (Figure 
[T]). Note that a block tree is not a tree, but we get a transitive tree if we view every clique as a node. 

In the following, we are often interested in this underlying tree structure of a block tree and refer to 
the cliques of a block tree as nodes. For a state s, we denote its node by u s . We say that a node v is 
below a node u if the states of v are reachable from the states in u (but not vice versa) and a node v is a 
child of a node it, if v is below u but there is no node w below u and above v. 

Likewise, we use the terms tree, subtree, and leaf for block tree, sub block tree, and leaf clique, 
respectively. 

We have to be careful about how to treat nominals when unraveling a model. If V(i) — {s} for 
a nominal i and a state s € M, we define V'(i) to be the set of states from M', that are copies via 
the unraveling of s. Therefore, B(M) is not a model H as defined in Section because nominals may 
hold at more than one state, but by viewing i as a propositional atom it can be treated as a model. 
The satisfaction relation is not affected and it is therefore easy to see that this transformation preserves 



2 Note that we can always get a model for tp from B(A4) by joining the states labeled with the same nominals, but this 
model might be different from M. 
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satisfaction of TLC -sentences: The relation associating each state of Ai with every copy in B(Ai) is a 
quasi-injective bisimulatiorjfl [8]. 

Lemma 2 For every transitive model Ai, every state s of Ai, every copy s' of s in B(A4), and every 
TL& -sentence ip: 

M,s \= ip B(M),s' h <P- 

If, for some block tree B and some state s of B, B,s \= ip holds, we refer to B as a block tree model 
for tp. 

Before we show how to use this tree-like structure to decide TLL^ over transitive frames, we focus on 
complete subframes and show that their size can be bounded. 

3.1 HC^ over Complete Frames 

As complete subframes are a significant part of transitive models, we are now going to study the sat- 
isfiability problem of riC} over complete framesQ. The most important result for our purpose is an 
exponential-size model property of riC} over complete frames. 

We want to start by giving some insight why this property holds. In complete frames, the accessibility 
relation does not distinguish different states. Of course, states can be told apart if they are labeled 
differently by propositions. But the number of different labelings is exponentially bounded in the size of 
the formula. To use more states, we have to distinguish states labeled equally. This can only be done by 
assigning names to these states. But the number of states we can distinguish in this way is bounded by 
the number of different state variables and nominals used in the sentence. 

While intuition is clear, we can prove this bound by observing that ri£} over complete frames is 
equivalent to the Monadic Class with equality (MC = ), the fragment of first-order logic with only unary 
predicates, equality, and no function symbols [10 . 

Before we present this connection precisely, we have to make a note on models. Every hybrid model 
can be viewed as a relational structure for its first-order correspondence language. This first-order 
language usually contains a binary relation to reflect the accessibility relation. For complete frames, the 
accessibility relation is trivial and can be ignored, respectively added when going from MC = to TLC^ . 

Lemma 3 There are polynomial time functions mapping riC} formulas ip to MC = formulas ij) and vice 
versa such that tp holds in a complete hybrid model Ai if and only if ip holds in the corresponding monadic 
structure. 

Proof. The mapping from Ti& over complete frames to MC = is based on the Standard Translation ST 
as defined in Section O The only rule of ST that uses the binary relation is the rule for the diamond 
operator: ST^Oa) = 3y(xRy A STj,(a)). But the right side can be reduced to 3y(ST y (a)), since xRy 
always holds on complete frames. 

For the other direction, we give the rules of a reduction HT from MC = to rid 1 . 

HT(P(x)) = OflAp) HT(i = y) = Oix Ny) 

HT(^) = -nHT(p) HT(>Ai/0 = HT(^) A HT(^)) 

HT(3.t.(^) = 0(la;.HT(¥>)) 

Note that both mappings can be computed in polynomial time and do not blow up formula size. □ 

This result allows us to transfer complexity results and model properties for MC = [10] to Ti.C^ over 
complete frames. 

Theorem 4 7iC^ over complete frames has the exponential-size model property and its satisfiability 
problem is complete for NEXPTIME. 

The lower bound can be transferred directly to the case of transitive frames. 
Corollary 5 The satisfiability problem for H.C^ over transitive frames is hard for NEXPTIME. 

3 The notion of bisimulation has to be extended by requiring states carrying the same nominal to be related. 
4 All results in this subsection hold for HC^ p , too. 
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Proof. We can force a transitive frame, more precisely, the subframe generated by the current state, 
to be complete by adding [x.OOx. In this way, we can give a reduction from the satisfiability problem 
of MC = by mapping a formula p to (Ix.OOx) A HT(</?). □ 

3.2 On Transitive Frames for H.C} 

Let us summarize what we have seen so far. For every 7i£^-formula satisfiable over transitive frames, 
instead of a transitive model we can consider its block tree. The size of the cliques in the block tree can 
be exponentially bounded in the size of the formula by Theorem [4] 

The algorithm for testing W£ -satisfiability will essentially guess a model and verify that it is correct. 
As there is no finite model property, all models might be infinite. Nevertheless, we will show that, if the 
formula is satisfiable, there is always a model with a regular structure in which certain finite patterns are 
repeated infinitely often. This will allow us to find a finite representation of such a model. 

To this end, Definition [5] captures the information about a state of a block tree that will be needed 
for the following. Intuitively, the (p-type of a state captures the information needed about its subtrees 
in order to evaluate any subformula of a given formula p at this state. Here, ip[free/A-} is the sentence 
obtained from ip by replacing every free variable by _L and sub{p) is the set of all subformulae of p. 

Definition 6 Let p be a TiC^ -sentence and B = (M,R,V) a block tree model which is a model of p. 
The p-type of a state s € M is the set of all sentences from {ip[free/ _L] | <>ip G sub(p)} that hold at 
some state in the subtree rooted at s. 

Note that states in the same clique have the same p-type. Therefore, we can speak of the p-type of 
a node. The type of a node is always a superset of the types of its children. More precisely, it is always 
the union of the types of the children together with the set of relevant formulae which hold in the node 
itself. 

When evaluating a subformula of a T^Z^-sentence p at some state s of a block tree, all we need to 
know about states strictly below u s are the (p-types of the children of u s . I.e., we can replace subtrees 
below u s by subtrees of the same 92- type. In the following lemma, for a block tree B and two states s\, S2, 
B[u Sl /u S2 ] denotes the block tree resulting from B by replacing the subtree rooted at u Sl by the subtree 
rooted at u S2 . The result of this substitution is again a block tree. 

Lemma 7 Let p be a -sentence, B = (M, R, V) a block tree model of p and s\ and S2 states of M 
such that there is a path from si to S2 but not vice versa. For every formula ip € sub(p>), every state S3 
of Ai of the same p-type as S2, and every assignment g that maps all free variables in ip to s\ or states 
in M preceding s\: 

B,9,si\=ip B[u S2 /u S3 ],g,s 1 \= ip. 

Proof. The proof is by induction on the structure of ip. Most cases are trivial since si is the only state 
that has to be considered, e.g., if ip — ip\ A 1P2 we only need to know whether ipi and ip2 hold at s±. 

The interesting case is ip = 0£. Here, we need to know whether £ holds at some state s' reachable 
from si. This can only be affected by our substitution if s' is in the replaced subtree, and therefore 
strictly below Si. Thus, by our assumption on g, all free variables in ip are mapped to states different 
and not reachable from s' . We can conclude 

B,g,s'\=t B,g,s , \=Z[free/±}. 

Hence £ holds at some state in the replaced subtree rooted at u S2 , if and only if ^[/ree/_L] is in the (/?-type 
of u S2 . The lemma follows because the new subtree has the same (p-type. □ 

Note that we restricted the choice of g only to those assignments that are relevant when evaluating 
the sentence p. 

We can use the previous lemma to get some nice restrictions on the block trees under consideration. 
E.g., we can assume that for every sentence in the type of a node, there is a witness in the node itself or 
in one of its children. 

Lemma 8 Let p be a HC^ -sentence satisfiable over transitive frames. Then there is a block tree model 
B for p, in which 
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Figure 2: An infinite block tree, its finite representation, and the infinite block tree obtained from this 
representation. 

• every node has at most \ip\ children, 

• for every node u with p-type t and every TiC^ -sentence if) £ t, ip holds at a state in u or at a state 
in a child of u, and 

• on every path from the root, infinite or ending at a leaf, every ip-type occurs only once or inhnitely 
often. 

Proof. Let <p be a HZ^-sentence satisfiable over transitive frames and B' a block tree model for p. 

A block tree satisfying the third condition can be obtained from B' by applying Lemma [Jj If there are 
two nodes u and v on a path, v below u, that have the same p-type, we can replace the subtree rooted 
at u by the subtree rooted at v. This allows us to cut every finite repetition down to a single occurrence 
of a (p-type. The resulting structure is still a block tree model for p. 

Now, consider some node u and its p-type t. For every sentence ip G t, we select some state in the 
subtree rooted at u such that ip holds at this state. Let U\,...,Uk be the nodes of those states, that are 
not in u. It easy to see, following similar tracks as in Lemma [71 that the block tree obtained by removing 
the nodes below u and inserting instead u\, . . . ,uu as children of u is again a block tree model of p. Even 
more, the type of u is not changed by this replacement. 

By applying this argument top-down from the root, we get a block tree model for tp satisfying the 
first two conditions. The third one is not affected by this transformation. 

Note that some care is needed to make this approach work for infinite models. Basically, we must 
define a function that assigns to each node of the original model its set of witnesses. The resulting model 
is obtained by using this function in a straightforward fashion. □ 

3.3 Deciding HC l -SAT over Transitive Frames 

We will now finish the proof of Theorem [T] by presenting a nondeterministic algorithm that decides 
over transitive frames in exponential time, basically by guessing and verifying the finite repre- 
sentation of a block tree model for a given HZ^-sentence p. 

Given a block tree B with the properties of Lemma [51 we get a finite representation as follows. For 
each path of B we consider the first node v that has the same type as its parent node u. We replace 
the subtree below v by a single state labeled with a reference to u, as shown in Figure [21 We need to 
keep v because it might be the only witness for a formula in the <p-type of u (cf. Lemma [8j. Clearly, the 
resulting structure is finite. 

By Lemma [7J and Lemma [HI we can get a block tree model from this representation by replacing each 
reference with the subtree rooted at the referenced node, i.e., essentially by an unraveling (Figure [2]). 

Due to Lemma [Jj the size of the representation can be reduced even further. If there are two nodes u 
and v of the same p-type which are both the first node of their type on their path from the root, we can 
replace the subtree rooted at v with the subtree of u. I.e., whenever two nodes have the same p-type, we 
can assume that their generated subtrees are equal. We have to check them only once. 

This observation can be reflected in our representation by replacing every duplicate with a reference, 
as illustrated in Figure [3] This causes every type to appear at most twice in the representation, thus the 
number of nodes is at most exponential. 
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Figure 3: Elimination of duplicates in the representation of a block tree. 

H£ l -SAT((p) 

1: Guess the finite representation (MUC, R, V, /) of a block tree model for ip. 
2: Guess a t^-type for every state in C. 
3: Run MCFULL' on the states in M, 

4: Compute the 9?- type for every state in M referenced by a state in C via /. 
5: Check for every state s € C that f(s) has the same y-type as s. If not, reject. 
6: Accept iff <p holds at some state in M. 

Figure 4: Our algorithm for 7i£^-satisfiability. 



Such a representation can be described by a structure (MUC, R, V) such that the states in C have 
no outgoing edges, and a function / from C to M. A state s € C stands for a repetition respectively 
duplication of the subtree rooted at /(s), including states from C. This causes infinite repetition if s is 
below f(s). Note that a state in C is a node of its own, in fact a leaf, and cannot be in the same complete 
subframe as a state in M. 

Summing up, if ip is satisfiable, there is a representation of a block tree model for ip of size at most 
exponential in the length of tp. The first step of the algorithm presented in Figure [4] is to guess such a 
representation (step 1). 

In order to obtain an algorithm which tests whether the representations indeed represents a model of 
ip, we describe how to modify the model checking algorithm MCFULL by Franceschet and de Rijke p~2] 
to do so. 

First, we deal with the states in C (step 2), simply by guessing their i/j-types. Next, the model 
checking algorithm MCFULL is used on the states in M (step 3). We have to modify this algorithm in 
two respects. First, it has to use the information guessed for the states in C . Second, it should compute 
the <p- types of the states in M. To this end, it first evaluates the sentences resulting from subformulac 
of ip by replacing free variables with J_. We call this modified algorithm MCFULL'. The changes are 
straightforward. 

After running MCFULL' the algorithm has computed for each state the set of formulae that hold 
at this state. These sets depend on the guesses in Step 2. Therefore, the algorithm has to verify their 
consistency. This can be done by comparing the (^-types of the states in C with the </?-types of the 
referenced states (steps 4 and 5). 

Finally, the algorithm checks if ip holds at some state in M (step 6). 

Theorem 9 The algorithm TLC^-SAT presented in Figure 0] decides HC^ -satisfiability over transitive 
frames nondeterministically in exponential time. 

Proof. In Section 13.21 we have seen that for every satisfiable sentence ip there is a block tree model 
as described in Lemma [5J We have also seen how to represent this block tree in a finite manner. The 
algorithm can guess this representation and the tp-types of the states in C. The computation of the 
tp-types of the states in M works correctly, because we have a witness for every sentence in the type 
of some node in our representation. This is by Lemma [8j which ensures that witnesses are in the node 
of the state or in one of its children. Therefore, we cut below these witnesses when building the finite 
representation. Consequently, the algorithm will accept. 

On the other hand, if the algorithm accepts, it is straightforward to construct a block tree model 
from the guessed representation. The only critical point for soundness is the verification of the tp-types 
guessed in Step 2, more precisely, the computation of the ip-types of the states in M. First, the tp-type 
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(xRyf = Babe (xRa A bRa A bRc A yRc 



t\ t\ 



A 0(z) A 1(a) A 2(6) A 3(c) A 0(y)), 

H*)' = -(«'), 
(a A/3)* = a* A/3*, 
(3a; a)* = 3x (0(x) A a*). 




Figure 5: The translation function and a zig-zag transition. 



of some state s € M contains only sentences that hold at some state of the represented model below s. 
This can be assured by looking only at states in M and not at states in C. That the tp-type of s contains 
all sentences that hold below s can be assured by following the links represented by states in C. 

The first two steps of the algorithm can be performed in exponential time because the representation 
is of at most exponential size. That Step 3 runs in exponential time follows from Theorem 4.5 of [12] . 
the truth of which is not affected by our modifications. The time bounds for the other steps follow again 
from the exponential size bound of the representation. □ 

From Theorem [9] and Corollary [5] we can conclude Theorem [TJ 

4 Decidability of Richer Hybrid j. Logics 

This section is concerned with satisfiability over transitive frames, transitive trees, and linear frames for 
extensions of HCK 

We investigate what happens if we extend the logic of the previous section with the ©-operator and/or 
the past modality P. We will prove undecidability over transitive frames. 

Therefore, we will consider these logics over more restricted frame classes, transitive trees and linear 
frames, where we will show them to be nonelementarily decidable. 

4.1 Transitive Frames 

Over transitive frames, we cannot sustain decidability if we enrich JiC} with @ or the backward looking 
modality P. We prove undecidability in both cases, making a detour via an undecidable fragment of 
first-order logic. The notation of such fragments is given in Section^ 

We proceed in two steps. First, we show that [all, (4, l)]-trans-SAT is undecidable. This is done by 
a reduction from [all, (0, 1)]-SAT. The undecidability of the latter is a consequence of the undecidability 
of contained traditional standard classes [10] . The second step consists of reductions from [all, (4, 1)]- 
trans-SAT to H/^'^-trans-SAT and TiC^ p -trans-SAT, respectively. To be more precise, the ranges of 
these reductions will be the fragments of the respective hybrid languages consisting of all nominal-free 
sentences. 

Lemma 10 [all, (4, l)]-trans-SAT is undecidable. 

Proof. In order to obtain the required reduction from [all, (0, 1)]-SAT, we will transform a (not neces- 
sarily transitive) model satisfying a into a transitive one. Simply taking the transitive closure in most 
cases adds new pairs to the interpretation of the relation and is not sufficient for keeping the information 
which pairs were in the "old" relation and which pairs were not. This problem does not arise if we instead 
use a variation of the zig-zag technique successfully applied in [3] for a reduction between a modal and 
a hybrid language. The core idea of this technique is to simulate an i?-step t\Rt2 in the original model 
A4 = (D,I) by a zig-zag transition in a model M' = (D',I'), where I'{R) is transitive, as shown in 
Figure [5] 

We define a translation function (•)* using four extra predicate symbols 0, 1, 2, 3 according to Figure^ 
The translation of the xRy-atoms exactly reflects the shown zig-zag transition. It is now straightforward 
to prove the following claim: For each formula a, a is satisfiable iff f(a) is satisfiable in some model 
that interprets R by a transitive relation. 
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Without loss of generality, we may assume that a has no free variables and that each variable is quan- 
tified exactly once. This can always be achieved by additional existential quantification and renaming, 
respectively. 

"=>". Suppose a is satisfied by some model A4 = (D,I). We construct a new model Ai 4 — (D 4 ,I 4 ), 
where D 4 = fl°U---UD 3 using D' = {d i \ d g £>}, for i = 0, 1, 2, 3. The interpretation I A is defined by 

I 4 (R) = {(xV 1 ), (x 2 ,x 4 ), (x 2 ,x 3 ), (y°,x 3 ) | (x,y) g /(/*)} and 
I 4 (P) = D P , P = Q,1,2,3. 

I 4 (R) codes an i(i?)-transition from state a; to y in as a sequence of backward and forward transitions 
from xq to j/o v i a xi,%2, %3 as shown in Figure It is easy to see that I 4 (R) is transitive, since there is 
no state with incoming and outgoing 7 4 (i?)-edges. 

We now show that for all subformulae /3(a?i, . . . , x m ) of a and all d\, . . . , d m g D: M. \= j3[di, . . . , d m ] 
iff M 4 \= /3* . . . , g?°„]. This immediately implies that M 4 satisfies a*. 

We proceed by induction on (3. The base case, (3 = xRy, is clear from the construction of I 4 (R). The 
Boolean cases are obvious. For the case (3 = 3x-f, we argue 

M \= 3x~f[di,...,d m ] 

3d g D (M \= 7 [di, . . . , d m , x ^ d]) 

<S> 3d g D (M 4 |= 7* [d° l7 ...,d° m ,x^ d }) 

& 3d' e D 4 (M 4 h (0(x) A 7 *) K, ...,rf° m ,iEH d']) 

^ X 4 H3x(0(x) A 7 ') 

« X 4 h (3^7)' [<•■•,<]• 

The second and third line are equivalent due to the induction hypothesis. The equivalence of the 
third and fourth line follows from the definition of i? 4 ; for the direction from below to above, one must 
take into account that because x is interpreted by d' and 0(x) is satisfied, a" is indeed some d°. 

. Let M = (D,I) be a model satisfying a*, where I(R) is transitive. We construct a new model 
M' = (D', I 1 ), where D' = 1(0) and 

I'(R) = {(d,e) G (D 1 ) 2 | 3abce D((d,a),(b,a),(b,c),(e,c) E I(R) 

& a g 7(1) kbe 1(2) & c g 7(3))}. 

We now show that for all subformulae /3(x\, . . . , x m ) of a and all d\, . . . , d m g £>: |= /3 [di, . . . , d m ] 
iff M. \= 0* [di, . . . , d m ]. This immediately implies that M! satisfies a. 

Again, the proof is via induction on (3. The base case, (3 = xRy, is clear from the construction of 
I'{R) and the fact that the translation of xRy requires 0(x) and 0(y). The Boolean cases are obvious. 
For the case (3 ~ 3x 7, we argue 

M' h 3xj[d 1 ,...,d m ] 

3deD'(M' \=i[d u ...,d m ,x^d\) 
<* 3deI(0)(M\=j t [d l ,...,d m ,x^d]) 
<S> 3deD(M\= (0(x) A 7') [di,...,d m ,x^> d]) 
<S> M H3x(0(x) A 7 t )[di,...,d m ] 
<S> M \= (3x7)*[di,...,d m ]. 

The induction hypothesis is applied between the second and third line. It is obvious that the third 
line implies the fourth; the backward direction is due to the fact that x is interpreted by d and Q(x) is 
satisfied, hence d g 1(0). 

This proves the above claim. Since (■) is an appropriate (even polynomial-time) reduction function, we 
have established undecidability for [all, (4, l)]-trans-SAT. □ 

Theorem 11 W^^-trans-SAT and WZ^p-trans-SAT are undecidabie. 



4 DECIDABILITY OF RICHER HYBRID j LOGICS 



13 



Proof. We reduce [all, (4, l)]-trans-SAT to the two problems W£ ; '®-trans-SAT and H£ L f p -trans-SAT, 
invoking a spy-point argument (for details of the spy-point technique see [2]). A spy-point is a state s 
of a hybrid model that sees all other states and is named by a fresh nominal i. Since our reduction will 
not make use of any nominals, we can establish this undecidability result for the nominal- free fragments 
of the hybrid languages in question. We simply treat i as a state variable and bind it to s. 

We first treat the case of 7i£^" @ and define a translation function (■)* from the first-order fragment 
to H£ u ® by 

(xRy)* = @ x Oy, (-a)* = -(a*), 

(P(x)Y = @ xP , (a A 0f = a* A /?*, 

(3a; a)' = ^Ojx.a*. 

The (polynomial) reduction function / is defined by 

f(a) = li.(-,Oi AOa f ). 

In order to argue that each formula a is satisfiable iff /(a) is satisfiable, we assume w. 1. o. g. that a is 
a sentence (see proof of Lemma [T0|) . For the "=>" direction, suppose a is satisfied by a model M. = (D, I). 
By adding the spy-point s to D, we obtain the hybrid model M h = (M h ,R h , V h ), where M h — D U {s}, 
R h = I(R)U{(s, d) | d £ D}, and V h (p) = I(P). Clearly, A4 h satisfies f(a) at s — under any assignment, 
since /(a) is a sentence. 

For the "<^" direction, suppose /(a) is satisfied at state s of some hybrid model M. = (M,R,V). 
The composition of /(a) enforces s to behave as the spy-point. It is easy to see that M! = (M — {s}, I), 
where I(R) = R\m-{s} an( i I(P) = V{p)i satisfies a. 

In the case of TtC^ p , we must simulate the @ operator using P, which is possible in the presence of a 
spy-point and transitivity. We simply re-define (•)* by 

(xRyf = P(i A F(x A Fy)), (^af = -(a ( ), 

(P(x)Y = P(i A F(x Ap)), (a A /?)' = a* A/?*, 

(3a; a)* = P(z A Fjz.a*) . 

The rest of the proof is the same as for HC^' @ . □ 



4.2 Transitive Trees 

Over transitive trees, where decidability of is trivial, even the extension TCCpp is decidable. This 
is an immediate consequence of the decidability of the monadic second-order theory of the countably 
branching tree, SwS, |10j . However, we have to face a nonelementary lower bound in both cases Ti.C^' 
and HCp p . This is obtained by a reduction from the nonelementarily decidable TCCp P -(N, >)-SAT [IB] , 
In the latter notation, (N, >) stands for the frame class consisting only of the frame (N, >). 

Theorem 12 H£^ p -tt-SAT, H£ l ' @ -tt-SAT, and W£ F ' p -tt-SAT are nonelementarily decidable. 

Proof. Decidability immediately follows from decidability of SuiS, using the Standard Translation ST. 
For the nonelementary lower bound, we reduce H£ l F P -(N, >)-SAT to H£ l F p -tt-SAT and H£ l '®-tt-SAT, 
respectively. 

Let us first consider H£ F p-tt-SAT. The frame (N, >) is a special case of a transitive tree. Our 
language is strong enough to enforce that a transitive tree model is based on (N, >). All we have to do 
is to require two properties: 

(1) Every point has at most one direct successor. 

(2) The underlying frame is rooted. 

Property (2) is expressed by PH±. Property (1) can be formulated in the following way: For any point 
x, whenever x has some successor, then we name one of the direct successors y and ensure that all direct 
successors of x satisfy y. This translates as 

A = FT^F 1 iy.P 1 G 1 y, 
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where F 1 , P 1 , and G 1 can be expressed by means of U and S, for example F 1 ^ = U((p, _L). But \J(tp,ip) 
can be simulated by lx.F(tp A H(Px — > V)) i analogously for S(tp, tp). 

Hence A is expressible in our language and of constant length. An appropriate reduction function / 
is given by f(tp) = tp A A A HA A HGA A PH_L. It is easy to observe that tp is satisfiable in some linear 
model iff /(</?) is satisfiable in some transitive tree. 

In the case of W£ ; '®-tt-SAT, we first have to simulate the P operator. This is done by a modified 
spy-point argument (for details of the spy-point technique see [2]). We simply label one point in the 
transitive tree by a fresh nominal i and simulate each occurrence of P in tp using |, a fresh variable v, 
and i. This is done in the following translation function (•)* : Tt£ F P — > HC^" & . 

a* = a, a G ATOM, (F^)* = 

(-^)« = -,(^*), (P0 = IvMiOW A Ov), 

It is easy to see that for each model M. based on (N, >), for each point x G N, and for each formula 
tp G HCp p : whenever i is true at the root 0, then M, x |= tp <^ M, x |= 

The point s labelled i represents the root of the frame (N, >). In the language Tt£^ & , it is not possible 
to express Property (2). This is in fact not necessary if we make sure that we never refer to the past of s 
in our final translation of ip. Such a "wrong" reference can only appear when the @ operator is used in 
connection with nominals occurring in tp. Let NOM(yj) = NOM n Sub(i^), and let 

M = AieNOM(»o 

Now the formula J,i.(Oy> A fi) does not contain any reference to any point before s. 
It remains to ensure Property (1). This is done by replacing A by 

A' = OT^ [x.O^yM^y 

and again expressing O 1 and D 1 by means of U, which can be simulated as shown in Section [T] Now, an 
appropriate reduction function is /', where f'(tp) = [i^Otp 1 A fi A A' A OX'). □ 



4.3 Linear Frames 

In the last part of this section we consider linear frames. A frame is called linear if it is irreflexive, 
transitive, and trichotomous. An important special case is the frame of the natural numbers with the 
usual ordering relation. 

Hybrid j languages over linear frames have already been addressed by Franceschet, de Rijke, and 
Schlingloff [13] . They showed that satisfiability of TLC^ P is nonelementary, even over natural numbers. 

This result also holds for TCCp p , because @ip can be simulated by 

P{i A tp) V {i A tp) V F(i A tp). 

While complexity drops down to NP for TLC^ the last case, i.e. "HC , was left open. We will answer 
this question in the following. 

Theorem 13 The satisfiability problem for TtC^'® over linear frames and over natural numbers is nonele- 
mentarily decidable. 

Proof. Only the lower bound has to be shown. We do so by giving a reduction from the satisfiability 
problem of first order logic over strings, a problem long known to have nonelementary complexity 3 lj . 
Strings over a finite alphabet S can be represented as 

({l,...,7l},<,(P ff ) CTeS ), 

were < is the usual ordering and P a a unary relation for every a G S. As before, these structures can 
also be used for hybrid reasoning. 
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We give a translation HT from first order logic into Tt£ , such that for every string S and every 
first order sentence tp, 

S^tp S',s\=Is.(HT(<p)AtP), 
where 5' results from S by adding a spy-point s preceding all other states, what is ensured by tp. 

UT(P a (x)) = i s O(!A Pj ) HT(^) = -.HT(p) 

WT(x = y) = @ s O(xAy) HT(yj A tp) = HT(</?) A WT(tp) 

WT(x<y) = @ s O{xA<>y) WT(3x.tp) = @ a O(lx.WT(<p)) 

The only if direction is obvious. For the if direction, we have to state that S' is a string and not just 
a linear frame. This is done by the formula 

tp = FLA DISCRETE A UNIQUE. 

The precise meaning of tp is that the subframe generated by s, but without the state s itself, is a string. 

There has to be at least one state in the string and there has to be a start and an end of the string, 
i.e., a state only preceded by s and a state without successor. 

FL = {0[x.{@ s U^Ox)) A (Odd.) 

We also have to ensure that the frame is not dense. 

DISCRETE^ D(OT -> {[x.O iyM x UU^y)) 

Finally, every state has to carry a unique label from the finite alphabet. 

UNIQUE = □ \J (a A f\ -V) 

All other properties of a string are already ensured by linearity. □ 



5 Hybrid Until/Since Logic over Transitive Frames and Transi- 
tive Trees 

In this section, we will consider TLC^ s -trans-SAT and TLC^ s -tt-SAT. In [3] it was shown that H.C® S -SAT 
is EXPTIME-complete. 

As for the lower bound, we establish a result as general as possible, namely EXPTIME-hardness of 
M£u-trans-SAT and AlCu-tt-SAT. 

Theorem 14 A4£u-trans-SAT and X£u-tt-SAT are EXPTIME-hard. 



Proof. We will reduce the global satisfiability problem for M.C to both our (local) problems A4Xu -trans-SAT 
and A^/Iu-tt-SAT using the same reduction function. The global satisfiability problem is defined by 

X-C-GLOBSAT = 
{(p G AiC | ip is true in all states of some Kripke model Ai}. 

Its EXPTIME-completeness is a direct consequence of the EXPTIME-completeness of A4£ E -SAT [29] . 

It may seem difficult to try reducing this problem over arbitrary frames to our satisfiability problem 
over transitive frames. The critical point lies in making a non-transitive model transitive: taking the 
transitive closure of its relation forces us to add new accessibilities that would disturb satisfaction of -iO- 
formulae. Fortunately though, the U operator can make us distinguish the accessibilities in the original 
model from those that have been added to make the relation transitive. Hence, a translation of Oip 
should demand: "Make sure that the current state sees a state in which the translation of ip holds, and 
that there is no state in between." This translates as U(y*, _L) into the modal language. 

To construct the required reduction, we define a translation function (•) : M.C — > M£[j by 

P*=p, pePROP, (<pAtp) t = <p t Atp t , 

H>)< = (o^)* = u( v t ,±). 

Using (•)*, we construct a reduction function / : M.C — > A4&j via f(ip) — p> 1 A □</?* (which is clearly 
computable in polynomial time). It is straightforward to prove the following two claims for each ip G ML. 
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(1) Ifcpe M/I-GLOBSAT, then f(cp) G A^u-tt-SAT. 

(2) If f(tp) G A4Aj-trans-SAT, then f G Af£-GLOBSAT. 

Since each transitive tree is a transitive model, (1) and (2) imply the claim of this theorem. 

(1) . Suppose if is satisfied in all states of some Kripke model Ai — (M,R,V). By considering the 
submodel generated by some arbitrary state, we can assume w. 1. o. g. that Ai has a root Wq. 

Due to the tree model property [6] there exists a tree-like model (a model whose underlying frame is a 
tree) that satisfies f at all states, too. Hence we can suppose Ai itself to be tree-like. From this model, 
we construct Ai' = (M, R + , V), which is clearly a transitive tree. 

Because of the tree- likeness of Ai, we observe that for each pair (w,v) G R, there exists no u G M 
between w and v in terms of R + , i.e. no u such that wR + u and uR + v. By means of this observation, 
we show that for all states m G M and all formulae ip G AiC: Ai , m \= ip iff A4', m \= ip*. This claim 
implies that M',Wo (= ft A Dcp*. It is proven by induction on the structure of if. The only interesting 
case is ip = Oi?, and the necessary argument can be summarized as follows. 

M,m h Ofi 

3n G M (mfln &Ai,n\=-d) 

3n e M(mRn & M',n^ 
<=> 3n e M(mR + n & M' , n \= i?* & -n3u e M(mR + u & 
^ X',m |= U(0*,JL) 

In this argument, the equivalence of the first and the second line follows from the induction hypothesis. 
The second and third line are equivalent due to the above observation. 

(2) . Let A4 = (M, R, V) be a transitive model and wq G M such that M, Wq \= f{f)- Again, we restrict 
ourselves to the submodel generated by Wq. Hence all states of M. are accessible from wq. 

Define a new Kripke model M' = (M, R', V) from Ai, where R 1 = {(w, v) G R\ ->3u G M(wRuRv)}. 
We show that for all states m G M and all formulae ip G AiC: Ai', m (= ip iff A't, m |= -0*- Again, we 
use induction on the structure of ip with the only interesting case ip = 0$ and the following argument. 

Ai',m \= Oi9 

^ 3neM(mR'n&cM',n\='d) 

<^> 3n€M((n=Wa or w^Rn) & mRn & -^3u{mRuRn) k, Ai,n \= i?*) 
O A4,m h U(i?*,_L) 

The equivalence of the first and the second line is due to the fact that Ai is rooted, the definition of 
R' as well as the induction hypothesis. Now, since Ai,WQ (= ip* A we conclude that for all states 
x G M, Ai,x \= f l . The previous claim implies that Ai' satisfies (f at all states. □ 

The upper bounds for H£u !S -trans-SAT and HCy s -tt-SAT require separate treatment. As for TiCfj §- 
trans-SAT, we use an embedding into an appropriate fragment of first-order logic. In order to eliminate 
transitivity, we "simulate" this semantic property by syntactic means, namely using the operators U ++ 
and S ++ defined in Section [2j 

Lemma 15 For any X C {@, E}, the problems 7i£^ s -trans-SAT and 7iC^++ S ++-SAT are polynomially 
reducible to each other. 

Proof. Either problem can be reduced to the other via a simple bijection / : Ti.C^ s — > HC^ ++ s++ or 
its inverse, respectively. This function simply replaces every occurrence of U (or S, respectively) in the 
input formula by U ++ (or S ++ , respectively). Obviously, / and / _1 can be computed in polynomial time. 
It is straightforward to inductively verify the following two propositions. 

(1) For every tp G TiC^ s : If f is satisfied in a state m of some transitive model Ai, then Ai,m \= f(ip). 

(2) For all <p G HC^+ + ^+ + : If if is satisfied in a state m of some model Ai — {M, R, V), then the 
transitive model Ai' = (M,R + ,V) satisfies J -1 ^) at rn. 
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□ 

Now it is not difficult anymore to obtain a 2EXPTIME upper bound for H£u jS -trans-SAT b Y 

an em- 
bedding into the loosely /^-guarded fragment /iLGF of first-order logic whose satisfiability problem is 
2EXPTIME-complete [T7]. Only the E operator requires a more careful analysis. 

Theorem 16 7£C|] ;S -trans-SAT is in 2EXPTIME. 

Proof. We first embed HCfj++ s ++ into the loosely /z-guarded fragment nLGF of first-order logic [17] . 
Since the satisfiability problem for ^LGF-sentences is 2EXPTIME-complete pi], we obtain a 2EXPTIME 
upper bound for H£® s -trans-SAT by Lemma [T51 As a second step, we will show a reduction from H.£y s - 
trans-SAT to H£j s -trans-SAT. 

For the embedding into /iLGF, we enhance the Standard Translation ST (see Section [2]) by the rule 

ST X (l) ++ (ip,ip)) = 3y[xR+y A ST y (tp) A Vz((xR + z A zR+y) -> ST z (i/>))] 

and an analogous rule for ST^ (S ++ (</j, tfj)) . ST y and ST Z are defined by exchanging x, y, z cyclically. 
It remains to take care of the R + expressions. But xR + y can be expressed by 

[ LFP W(x, y).{xRy V 3z(zRy A xWz))] xy, 

yielding a /iLGF-sentence with three variables. (If U ++ operators are nested, variables can be "recycled" .) 
The constants from the translations of nominals can be eliminated introducing new variables as shown 
in [16] . The whole translation only requires time polynomial in the length of the input formula. 

As for the more expressive language with E, we can embed the stronger language TlCy S into TiC^ c, 
using a spy-point argument and exploiting the fact that we are restricted to transitive frames. A spy-point 
is a point s that sees all other points and is named by the fresh nominal i. For details of this technique 
see 0[2]. 

By adding a spy-point to a transitive model, Eip can be simulated by @iOip. Hence, if we take the 
translation (•)* : HCy s — > HC® S that simply replaces all occurrences of E as shown, we obtain a reduction 
function / : W£^ s -trans-SAT -> s -trans-SAT b y setting f(<p) = i A ^Oi A OtpK 

Clearly, / is computable in polynomial time. It is straightforward to verify that / is an appropriate 
reduction function: If tp £ TiCfj s is satisfied at some point of some transitive model, add the spy-point 
s and the according accessibilities. The new model satisfies f(ip) at s. For the converse, if a transitive 
model satisfies f(<p) at some point s, then s must be a spy-point, and tp is satisfied at another point m. 
Remove s and the according accessibilities from the model and observe that it now satisfies tp at m. □ 

A note on the discrepancy between the upper and lower bound for HCy s -trans-SAT. Since the 2EXP- 
TIME result for /iLGF in [17] holds for sentences without constants only, constants — which arise from the 
translation of nominals — must be reformulated using new variables. This causes an unbounded number 
of variables in the first-order vocabulary, because we have no restriction on the number of nominals in 
our hybrid language. 

Could we assume that the number of nominals were bounded, then the described reduction would yield 
guarded fixpoint sentences of bounded width. In this case, satisfiability is EXPTIME-complete [17] . It is 
not known whether in the case of a bounded number of variables, but an arbitrary number of constants, 
satisfiability for /xLGF-sentences also decreases from 2EXPTIME to EXPTIME, as it is the case for the 
fragment without the \i operator [33]. If there were a positive answer to this question, an EXPTIME 
upper bound for our satisfiability problem would follow. 

We now show that H£u iS -tt-SAT is in EXPTIME, using an embedding into VDCtrce, the propositional 
dynamic logic for sibling-ordered trees introduced in [21] [22]. Finite, node-labelled, sibling-ordered trees 
are the logical abstraction of XML (extensible Markup Language) documents. In p], it was shown that 
satisfiability of VDC trC c formulae at the root of finite trees (VVCt reB -SAT) is decidable in EXPTIME. 

Since we are going to give an embedding into WCtroc, we first introduce its syntax and semantics. 
VDCt rcc is the language of propositional dynamic logic with four atomic programs left, right, up, and 
down that are associated with the relations "left sister" , "right sister" , "parent" , and "daughter" in trees. 
It consists of all formulae of the form 
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where p G ATOM and tt is a program. Programs are defined by 

7r ::= left | right | up | down | 7r; tt \ n U 7T | 7r* | </?? , 

where y> is a formula. We abbreviate [tt] tp := —1(77) and a + := a; a* for atomic programs a. 

A VDCtree model is a multi-modal model = (T, i?down, bright, V), where T is a finite tree with an 
order relation on all immediate successors of any node, i?dom is the successor relation and i? r ight is the 
"next-sister" relation. The set of relations is extended to arbitrary programs as follows: 



Rirp 




RttUtt' 


— R^ U R n i , 


Rlett 


= -Rright > 


Rn* 


- R-K 1 


Rtt-j-it' 


= Ryr O R % , , 


Rip? 


= {(to, to) Ai, to 



The satisfaction relation for atomic formulae and Booleans is defined as for hybrid logic. The modal 
case is given by 

M , to |= (tt) p iff 3n eTlmR^n & M,n^ tp). 

A formula p is satisfiable if and only if there exists a model A4 — (T, R domi , R rigiLt ,V), such that 
A4, to |= where m is the root of T. For any (/?, let N(ip) be the set of all nominals occurring in p>. 

Theorem 17 W£u S -tt-SAT is in EXPTIME. 

Proof. We reduce HC^ s -trans-SAT to PP£ t rcc-SAT and define a translation (•)* : HC^ s -> W£ tICC 

by 

= p, pe ATOM, (E<p)' = (up*; down*) y>*, 

(^)* = -,(^), (U^V))* = ((down; ^?)*; down) ^, 

{<p A ^)« = A V*, (Sfo V)) ' = ((up; ^?)*;up) ^. 

(nominals are translated into atomic propositions); 

Since VDCt rC e has no nominals, we must enforce that (the translation of) each nominal is true at 
exactly one point by requiring 



v(i) — (down*) i A [down*] \ i — > ([down + ] -ti A [up + ] —*i 

A [up*; lef t + ; down*] —A A [up*; right + ; down*] -1 

to hold for each nominal i. As a reduction function, we have 

f(p>) = (down*) Lp l A AieAf( v ) 

It is clear that / is computable in polynomial time and straightforward to show that / is an appropriate 
reduction function: Suppose, ip is satisfiable in some finite transitive tree model A4 = (M, R, V) based 
on the tree (M,R') with root w. Then f(ip) is satisfiable in w of the VDC tICC model based on the tree 
(A/, R'), equipped with the valuation V. For the converse, if f(<p) is satisfied at the root of some VDCt rcc 
model M = (M, i?down, -Rright, V), then p t is true at some point w, and each nominal is true at exactly one 
point of A4. Hence (M, R^ om , V) — where R^ om is the transitive closure of i?down — is a hybrid transitive 
tree model satisfying tp at w. 

Now there is one drawback in the reduction via /. According to our definition of a tree, it is not 
necessary that a (transitive) tree is finite or has a root. A node can have infinitely many successors, or 
there may be an infinitely long forward or backward path from some point. For most practical applications 
these cases are certainly hardly of interest, but we strive for a more general result. If we do allow for 
infinite depth or width, the above translation into VDCtree — which is interpreted over finite, rooted 
trees — is not sufficient. 

To overcome finiteness, it suffices to re-examine the proof for the EXPTIME upper bound of VDC tr0 o- 
satisfiability in pQ. This proof in fact covers a more general result, too, namely that satisfiability of 
WLtxcc formulae over (not necessarily finite) trees is in EXPTIME. 
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Figure 6: Making predecessors successors. 

To cater for the fact that "our" trees do not need to have roots, we first observe that satisfiability 
over rooted transitive trees is reducible to satisfiability over (arbitrary) transitive trees, because a root 
is expressible by PH_L in our language. Since the lower bound from Theorem [T4l holds with respect to 
rooted transitive trees, it also holds for arbitrary ones. 

In order to obtain the upper bound with respect to arbitrary transitive trees, we propose a modification 
of the above reduction via /. The basic idea is to turn the backward path from the node w (that is to 
satisfy ip) into a forward path, such that w becomes the root of the transformed model. Thus all 
predecessors of w (and their predecessors) become successors and must be marked by a fresh proposition 
b. (See Figure El) 

As a first step, we construct a new translation (■) from (■)* retaining all but the U/S-cases. For U/S, 
we replace all occurrences of the programs down and up by programs that incorporate the new structure 
and the fact that for b-nodes, their predecessors used to be their successors, and their b-successors used 
to be their predecessors. We define 

(U(tp,iP)) tb = ((dn';^ tb ?)*;dn')^ tb and 
(S(^))* b = ((up';V tb ?)*;up')vA where 

dn' = (down; -.b?) U (b?; up) and up' = (-.[>?; up) U (b?; down; b?) . 

Note that we do not change the translation of Eip. The only thing that remains to do is to enforce 
that there is exactly one path at whose every node b is true. This means that b must be true at the root 
node and at exactly one successor of each node satisfying b. This can be expressed by 

P = b A [down*] (b -> ([left+] ^b A [right" 1 "] -.b A (down) b)j 
A [down*] (-ib — > [down]-ib) . 

It is now straightforward to show that f^, given by /(</?) — ^ft^l\ieN(ip) v {^) > 1S indeed an appropriate 
reduction function. 

(Note that ip tb replaces (down*) ip*", because we have turned w into the new root node.) □ 

6 Conclusion 

We have established two groups of complexity results for hybrid logics over three temporally relevant 
frame classes: transitive frames, transitive trees, and linear frames. 

First, we have "tamed" HC l over transitive frames showing that W£ x -trans-SAT is NEXPTIME- 
complete. The key step of our proof was to find a finite representation of transitive models for this logic. 
In contrast, we proved that H£ i,@ -trans-SAT and HC.\ p -trans-SAT are undecidable. In this context, the 
question arises whether the multi-modal variant of TiC^ over transitive frames is still decidable. 

Over transitive trees, we showed three enrichments of Ti.C^ to be decidable, albeit nonelementarily, 
namely HC l '®-tt-SAT, HC^ p -tt-SAT, and %C F |p-tt-SAT. Concerning linear frames, we obtained the 

same result for 7i£^ @ -lin-SAT, an issue left open in [13] . 

In the third part of our work, we established an EXPTIME lower bound for A"l£u-trans-SAT and 
X£u-tt-SAT and matched the latter with an EXPTIME upper bound for H£{] )S -tt-SAT. This is the same 
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complexity as for satisfiability over arbitrary frames for the same language. As for 7i£y s -trans-SAT, we 
have given a 2EXPTIME upper bound. We conjecture EXPTIME-completeness. 

Over linear frames, the complexity of hybrid U/S logic is still open. As a special case, satisfiability of 
HC^ S over (N, >) is known to be PSPACE-complete pjj. Moreover, in [27] it was shown that MC U is 
PSPACE-complete with respect to general linear time. Over this frame class — which does not properly 
contain that of linear orders — the temporal hybrid languages from this paper could be re-examined in 
future work. 
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